Skip to content

Commit

Permalink
[service] remove explicit systemd security features
Browse files Browse the repository at this point in the history
Running this service definition as a user service was failing due to these restrictions.
Disable them for now to have keep the service working,
  • Loading branch information
stendler committed Feb 29, 2024
1 parent 2e2cc0f commit b4316a1
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions container-check-update.service
Original file line number Diff line number Diff line change
Expand Up @@ -18,10 +18,10 @@ ExecStart=/usr/bin/podman run --rm \
SuccessExitStatus=0 2

# Hardening
ProtectSystem=full
PrivateTmp=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
#ProtectSystem=full
#PrivateTmp=true
#MemoryDenyWriteExecute=true
#NoNewPrivileges=true

[Install]
WantedBy=podman-auto-update.service

0 comments on commit b4316a1

Please sign in to comment.